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SERVICE PROTECTION METHOD AND APPARATUS 
FOR TDM or WDM COMMUNICATIONS NETWORKS 

Field of the Invention 

This invention relates to a method and apparatus for providing service 
5 protection to a TDM (time division multiplexed) or WDM (wavelength division 
multiplexed) communications transport network (such as a synchronous optical 
network (SONET)) on a flexible, service path basis. 

Background of the Invention 

Currently, wide area networks (WANs) are primarily structured for a point-to- 

10 point delivery of bandwidth in the form of static 'pipes' using TDM e.g. SONET 
(synchronous optical network)/SDH (synchronous digital hierarchy) and WDM 
based optical technologies. A SONET signal (i.e. such as STS-48, meaning 48 
synchronous transport streams) is typically composed of multiple STS-1 's which are 
assigned to various resources or clients, with the greater the number of STS-1 's 

15 representing increased bandwidth. Networks based on these technologies enable 
services, such as traditional private line services, which have the following 
characteristics: 

- Point-to-point connectivity with ubiquity of access; 

- Determinism, whereby bandwidth is 100% dedicated to the connection at 
2 0 all times using time domain multiplexing; 

- Isolation, whereby individual services have fully dedicated and separated 

resources; 

- Static, whereby connections are made on a medium to long time frame 

basis; 

25 - Symmetric, whereby both the outbound and inbound paths have the same 

bandwidth quanta; and, 
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- Non-dynamic, whereby the bandwidth quanta are constant over the life of 
the connection. 

Protection mechanisms, for providing alternate transport paths in the event 
of a failure of a working transport path, are normally achieved within a WAN 
5 transport network by providing redundancy for services of fixed bandwidth. These 
known protection mechanisms include, for SONET, UPSR (a path switched 
mechanism), BLSR (a line switched mechanism), Linear 1+1, Linear 1:1 and Linear 
1:N and, for wavelengths, O-BLSR, 0-UPSR,1+1 wavelength switching and 1+1 
line switching. Disadvantageously, however, these known protection mechanisms 

10 utilize substantial redundancy. For the BLSR and 1+1 APS line protection 
mechanisms and the UPSR path protection mechanism twice the network 
bandwidth is reserved for all service traffic (i.e. to provide the active path and the 
restoral path). Thus, on using these existing protection mechanisms, service 
providers are limited to providing either network survivability, at the cost of wasting 

15 half of the network bandwidth for protection, orfull usage of the network bandwidth 
at the cost of no protection. The "extra traffic" 1 : 1 line protection mechanism differs 
from 1 +1 line protection in that the protection bandwidth is made available for use 
on a "best efforts" basis such that when a network failure occurs, the best effort 
traffic is dropped to allow the protected traffic access to the available resources. 

2 0 For 1 :N line protection a single network path is used as the restoration path for N 
active channels. Thus, this protection mechanism also uses less than twice the 
operating bandwidth but the bandwidth needed to provide protection remains 
undesirably high and, moreover, multiple failures occurring simultaneously may not 
result in enough bandwidth to allow protection to occur. 

2 5 More recently, a new class of data service has emerged which relies upon 

an on-going reallocation of bandwidth (i.e. STS-1's) amongst the clients by means 
of WAN networking devices within the link layer, examples of such services being 
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high speed GbE, Fibre Channel and HDTV services. This reallocation of 
bandwidth can be accomplished on an in-service basis, with no perceived 
interruption in the data communications service by the clients. Although this new 
service class, which is essentially packet-based, holds some of the same 
5 characteristics as the foregoing traditional services and remains well served by 
100% deterministic TDM or WDM networks, it has characteristics which are the 
opposite of traditional services, in particular, flexible bandwidth. This new class of 
data services is point-to-point in nature, deterministic and isolated, like the 
foregoing traditional services, but is different in that: (i) it is non-symmetric (ingress 
10 and egress traffic are generally unequal); (ii) it is dynamic (connection bandwidth 
varies over the life of the connection in response to non-static service loads); and, 
(iii) it is packet-based, such that the application can, in principle, make use of semi- 
arbitrary transport bandwidths by using flow control mechanisms which guarantee 
packet delivery or by using higher level protocols which resend any lost packets. 

15 For this new class of data service, there is a need for means to provide 

different levels of protection for different service paths. In addition, there is a need 
for a protection switching mechanism that allows full network resource usage 
f during normal operation while at the same time allowing for all services to be 

protected under failure conditions. 

2 0 Summary of the Invention 

The invention herein provides service path protection for the aforesaid new 
class of data services on the basis that since these services are essentially packet- 
based it is possible to use reduced transport bandwidth when providing service 
protection. Specifically, transport bandwidth used to transport services, in normal 

25 operation, is made available as a shared protection resource as and when needed. 
In essence, therefore, the invention provides "M:N" protection whereby the ratios 
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of pre- and post-protection invocation bandwidths, for each service, can be freely 
adjusted as desired. 

In accordance with the invention there is provided a method for providing 
service protection to service paths transporting client data packet streams received 
5 from a plurality of packet-based client Interfaces over a TDM or WDM network. The 
service paths are assigned to the data packet streams on a per-client basis. The 
network comprises a plurality of nodes and, at each node thereof, a plurality of 
network interfaces for configuring data frames comprising client data packet 
streams for transport from and to the network. Each client-based service path is 

1 0 defined by a selectable working path when service protection has not been initiated 
for that service path and each working path comprises a selectable bandwidth and 
at least one network interface associated therewith. Selectable portions of the 
bandwidth of a working path are designated as unpreemptable and/or preemptable. 
The preemptable portions of working path bandwidths are made available for 

15 protection preemption by different working paths. A protection path is assigned to 
each service path which is desired to be provided service protection whereby each 
protection path comprises a selectable bandwidth and at least one network 
interi'ace which is distinct from the network interface associated with the working 
path for the service path. The protection path bandwidth comprises preemptable 

2 0 bandwidth portion(s) of working path(s) defining a different service path{s) and/or 
unused bandwidth of the network. In response to a protection switch request 
configured for initiating service protection for a protection-designated service path, 
the protection-designated service path is switched so that it is defined by the 
protection path assigned to it. Preemptable bandwidth portion(s) of the different 

25 client-based service path(s) is (are) thereby preempted for use by the protection- 
designated service path and lost for use by the different client-based service 
path(s). 
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Preferably, where a service paths is selected to be unprotected the working 
path bandwidth for such unprotected service path is designated unpreemptable. 
The protection path bandwidth preferably consists of one or more of the 
preemptable portions of working path bandwidth(s) defining different client-based 
5 service path(s). The protection path bandwidth may be selected to be less than or 
equal to the working path for the service path. 

The service path may be unidirectional or bidirectional. Where the sen/ice 
path is bidirectional the network comprises receive and transmit nodes, each node 
comprising a network interface, and the switching is performed at each of the 
10 receive and transmit nodes of the service path. The protection switch request is 
preferably received by the receive node of the service path. The service path 
may comprise asymmetric bandwidth whereby the bandwidth In one direction of the 
service path differing from the bandwidth in the opposite direction. 

In one embodiment of the invention the network is a SONET network 
15 and each service path bandwidth is comprised of a selectable number of STS-1 s. 

The working path bandwidths are preferably selected on a dynamic basis in 
response to network bandwidth available at a given point in time, whereby use of 
the network bandwidth for the working paths is maximized. 

2 0 In accordance with another aspect of the invention there is provided a service 

path protection apparatus for providing service protection to selectable client-based 
service paths transporting client data packet streams over a TDM or WDM network. 
Each service path is defined by a working path when subject to normal conditions 
but, when subject to protection conditions, is defined by a protection path. Each 

25 working path is defined by a selectable bandwidth associated with a network 
interface. A bandwidth allocation controller is configured for designating selectable 
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portion(s) of the bandwidth of a working path for a protected service path as 
unpreemptable and/or preemptable, the preemptable portion(s) being available for 
protection preemption by a different working path. A protection path is assigned 
to each protected service path, each protection path comprising a selectable 
5 bandwidth associated with a network interface which is distinct from the network 
interface associated with the working path for that protected service path. The 
protection path bandwidth comprises bandwidth preemptable portion{s) of working 
path(s) for different service path (s) and/or unused network bandwidth. A service 
path protection switch is operable in response to a protection switch request, the 
10 protection switch being configured for switching the protected service path so that 
it is defined by the protection path assigned to it. The preemptable bandwidth 

^ portion of the different service path is thereby preempted for use by the protected 

^ service path and lost for use by the different service path. 

_S Preferably, the bandwidth allocation controller is configured for designating 

15 selectable bandwidth portions of the service paths as being either protected or 

^ unprotected, wherein unprotected bandwidth portions are designated as 

=1 unpreemptable. 

Brief Description of the Drawings 

Reference will now be made to the accompanying drawings which show, by 
2 0 way of example, a preferred embodiment of the present invention: 

Figures 1 (a), (b) and (c) illustrate a working path bandwidth allocation for four 
clients (data services) for transmission over two transport lines (A and B), wherein 
Figure 1 (a) is a block diagram of the network showing the working path bandwidth 
allocation established by a bandwidth allocation controller, Figure 1(b) is a table 
25 showing the assignment of data transport frames (i.e. SONET frames) for the 
working paths (for clients 1 and 2) transported by network interface A to network 
line A and Figure 1 (c) is a table showing the assignment of data transport frames 
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(i.e. SONET frames) for the working paths (for clients 3 and 4) transported by 
network interface B to network line B; 

Figures 2(a) and (b) illustrate a protection path bandwidth allocation and 
implementation for the four clients (data services) of the network of Figure 1 when 
a failure occurs on line A, wherein Figure 2(a) is a block diagram of the network 
showing the protection paths for clients 1 and 2 on line B and Figure 2(b) is a table 
showing an assignment of data transport frames (i.e. SONET frames) for each of 
clients 1-4 transported by line B under protection conditions providing protection 
to the service paths for clients 1 and 2; 

Figure 3 is block diagram of a bi-directional network illustrating both the 
transmit and receive service paths for one transport line (only) between network 
nodes A and B; and, 

Figure 4 is a state diagram illustrating the operations performed by a service 
path protection finite state machine (FSM) which determines how a bandwidth 
allocation controller is to be configured at each node (i.e. each of nodes A and B 
in Figure 3) of a protected network in accordance with the invention. 

Detailed Description of the Illustrated Preferred Embodiment 

In accordance with the invention a method and apparatus are provided for 
adjusting service path bandwidth in a TDM or WDM network in response to 
available network bandwidth on a per-service (i.e. per-client) basis. Accordingly, 
the method and apparatus allow a network provider to utilize all bandwidth In the 
network for services under normal conditions, while still providing protection 
services. Advantageously, the network may be configured for different levels of 
protection on a service path basis. 

The term "service path" used herein means a collection of bandwidth units 
assigned to a client interface and used to transport a data service. In a SONET 
transport network the service path bandwidth units are STS-1s, the number of 



which must not exceed the available line rate. Alternatively, the bandwidth unit of 
a WDM transport network could be wavelength based. A preferred embodiment 
of the invention described herein is configured for a SONET transport network and, 
accordingly, the following examples contemplate the use of a SONET network; 
however, it is to be understood that the invention is not limited to any particular 
TDM or WDM network configuration and is applicable to both TDM and WDM 
networks. 

The bandwidth units (STS-1s) allocated to a particular data service carry the 
data for that service from one SONET network element to another. Since the 
allocation of bandwidth units to any one service path (client) may follow any 
configuration, as determined by a bandwidth allocation controller, the bandwidth 
units need not be contiguous. Moreover, an individual service path can be 
composed of multiple grades of bandwidth and can be unidirectional or bi- 
directional (in which case bandwidth assignment is asymmetric in that the number 
of bandwidth units used in one direction does not have to equal the amount of 
bandwidth used in the other direction). 

Different service protection grades for each service path may be configured 
and defined as desired. Examples of different configurations include the following: 

1 . Protected: Guarantees protection on a single failure to that path. 

2. Unprotected: Does not protect the path if a failure occurs along the path 
(and, preferably, service provided by the path will not be preempted if a 
failure occurs on another path). 

3. Preemptable: Service provided by the path may be preempted if a failure 
occurs on another path and is not protected. 

The bandwidth of a service path is configured by a bandwidth allocation 
controller 10 by means of software, the operation and algorithms of which are 



described in the following with reference to Figures 1(a), (b) and (c) and Figures 
2(a) and (b). A user assigns a number of frames (e.g. STS-1s) of a specific 
network interface (e.g. SONET), such as network interface A in Figure 1(a), to a 
data packet stream from a client interface (e.g. Gigabit Ethernet or Fiber Channel), 
such as client interface 5 in Figure 1(a). This is designated as the "working" path 
for the assigned client interface 5 and the number of frames assigned cannot 
exceed the number of frames available on network interface A to which that client 
is assigned. The number of frames allocated to a client's working path determines 
the bandwidth for that working path (e.g. the greater the number of STS-ls 
allocated to a client service path the greater the bandwidth of that service path). 
Optionally, the user may specify exactly which frames are assigned. For all 
unidirectional client interfaces the assignment is done explicitly for each transport 
direction (i.e. transmit and receive). Under normal conditions (i.e. when service 
protection conditions have not been initiated for the working path) the working path 
and the service path are one and the same. 

Of the frames allocated to a client any (or all) may be designated as a 
protected frame and the number of protected frames for each client are then made 
available on an alternate network interface, such as network interface B in Figure 
1(a). This alternate network interface (e.g. network interface B) is physically 
distinct from the network interface assigned to the working path (e.g. network 
interface A). These frames, made available on the alternate network interface, are 
designated as the protection path for the client. Optionally, the user may specify 
exactly which frames are assigned for the protection path. A bandwidth allocation 
controller 10 maintains the frame allocation for the protection path in memory. 
When a failure occurs on the working path the bandwidth allocation controller 10 
switches the working path frames to the protection path and under these 
protections conditions the service path becomes the protection path. 



Each of the frames assigned to a working path for a client is designated as 
either preemptable or unpreemptable by the bandwidth allocation device 10. 
"Preemptable" frames may be assigned to a protection path of a different client 
such that if a failure occurs on such different client's working path, the frames 
5 designated as preemptable may be used by such different client (in which case, 
during the time the protection condition exists, use of these frames would be lost 
to the client which normally has use of these frames as part of its working path). 
The number of frames designated as preemptable or unpreemptable is set by the 
user and the user also designates which frames these are. In an alternative 
10 embodiment, however, the frames to be designated may be determined by 
software based on which frames are unused (i.e. on the basis of the bandwidth 
which is available at a given point in time). 

The tables of Figures 1(b) and (c) show the allocation of data frames (e.g. 
SONET frames) for working paths of two distinct network interfaces A and B, 

15 respectively, this allocation being maintained in memory for use by the bandwidth 
allocation controller 1 0. For each table, one row represents one frame (numbering 
1-12 in the examples provided by these tables) and one column is provided for 
each of the frame designators "unpreemptable", "preemptable" and "protected" 
which serve to identify the type of frame. Each entry in each table (i.e. the number, 

20 if any, appearing in a box of a table) identifies the specific client interface, being 
one of clients 1-4 as shown in Figure 1 (a), assigned to that particular type of frame 
(designator). The final columns of the tables of Figures 1(b) and (c), headed "BW 
Allocation", identify the working path set-up of the bandwidth allocation controller 
10 for network interfaces A and B, respectively. As shown in Figure 1(a) and 

25 specified in the tables of Figures 1(b) and (c), client 1 is assigned frame nos. 1-6 
of network interface A, client 2 is assigned frame nos. 7-12 of network interface A, 
client 3 is assigned frame nos. 1-6 of network interface B and client 4 is assigned 
frame nos. 7-1 2 of network interface B. Figure 1 (b) also shows that frames 4-6 and 



10 



10-12 of interface A will be used by clients 3 and 4, respectively, when protection 
Is required for those clients. Similarly, Figure 1(c) shows that frames 4-6 and 10-12 
of interface B will be used by clients 1 and 2, respectively, when protection is 
required for those clients. 

5 Protection is provided by the bandwidth allocation controller 10 as follows. 

First, the working unpreemptable bandwidth (I.e. frames) that are to carry the 
service during normal operating conditions is configured. Then the protection 
bandwidth is configured for a different transport line so that, when protection 
switching occurs, that other line will carry the service. The protection bandwidth is 

10 selectable, as desired, and as shown in Figures 1(b) and (c) may be equal to or 
less than the working bandwidth (in these Figures only three frames for each of the 
six frames assigned to the working path for a client are assigned a protection path). 
Lastly, the preemptable bandwidth (which is also used to carry the service for the 
client assigned to it during normal operating conditions) is configured and this 

15 preemptable bandwidth is released to other assigned service(s) when they require 
protection. For example, as shown in Figures 1(b) and (c), frames 4-6 on network 
interface A assigned to client 1's working path are designated as protected 
bandwidth and the protection path assigned to these frames is comprised of frames 
4-6 on network interface B assigned to client 3's working path. Thus, frames 4-6 

20 of client 3's working path are designated as preemptable. Frame nos. 1-3 of client 
1's working path are not protected and are designated unpreemptable. Each 
service path is configured with one, two or all three types of bandwidth as aforesaid 
(but it is to be understood that protection bandwidth cannot exist on its own). 

Figures 2(a) and (b) illustrate the implementation of a protection service path 
2 5 when a failure occurs on line A of the network of Figure 1(a). As shown, the 
bandwidth allocation controller 10 is reset so that each of clients 1 and 2 are 
switched to transport line B when a failure occurs on line A. Protection is provided 
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to clients 1 and 2 by providing them with unused bandwidth of the network (if any 
such unused bandwidth is available) and/or, as needed, with the preemptable 
bandwidth of clients 3 and 4 (which reduces the bandwidth provided to clients 3 
and 4). For the example shown by Figures 2(a) and (b), each client is assigned 
5 three frames when all protection paths have been initiated and the reduced 
(preempted) number of frames represents one-half of the bandwidth assigned to 
the clients' working paths under normal conditions (i.e. when protection is not 
needed). The preemptable bandwidth portion of the protection path (i.e. the frames 
designated as preemptable) is, under protection conditions, preempted for use by 
1 0 the protected client service path and lost for use by the different client service path 
whose working path includes it. 

Service path protection is provided by the bandwidth allocation controller 1 0 

- when a transport line fault is detected and a switch request initiates a network 

- protection switch. Protection is carried out at both ends of a service path whereby 
^~ 15 the protection bandwidth allocation for the path is identified and processed at both 

the receive and transmit nodes (e.g. nodes A and B in Figures 1(a), 2(a) and 3). 
n.,: A protection switch is initiated by a receive node of a service path (following receipt 

of a switch request) and is not considered complete until both the receive and 
transmit nodes have successfully completed the required protection bandwidth 
2 0 reconfiguration for the network interface(s) assigned to protect the service working 
path(s) on which the fault occurred. 

If the service path is bi-directional, as illustrated by Figure 3, both the receive 
and the transmit directions must be successfully switched at both nodes before the 
switch is considered complete. With reference to Figure 3, the following steps are 
2 5 performed to complete a service path protection switch for one transport line when 
a switch request is received at node A: 



12 



(a) At node A, the forwarding of packets to node B is stopped and ail pacl^ets 
received from the affected clients (those which are to be provided protection 
by this transport line) are buffered in a buffer 30, and a message is sent to 
node B to initiate a switch; 

(b) At node B, upon receipt of the message to initiate a switch, transmission of 
packets to the affected clients is halted (i.e. idle frames are sent) by buffer 
32, the forwarding of packets to node A is stopped, all packets received from 
the affected clients are buffered in a buffer 35, and a message is sent to 
node A to acknowledge that the switch has been initiated; 

(c) At node A, upon receipt of the message acknowledging the switch initiation, 
transmission of packets to the affected clients is halted (i.e. idle frames are 
sent) by buffer 37, the bandwidth allocation controller 10 is configured to use 
the protection bandwidth configuration associated with the affected clients 
for this transport line and a switch request message is sent to node B; 

(d) At node B, upon receipt of the switch request message the bandwidth 
allocation controller 10' is configured to use the protection bandwidth 
configuration associated with the affected clients for this transport line, 
transmission of packets to the affected clients is resumed (i.e unnecessary 
idle frames are no longer sent) by buffer 32, forwarding of packets to Node 
A is resumed by buffer 35 and a message is sent to Node A acknowledging 
the switch request; 

(e) At node A, upon receipt of the message acknowledging the switch request, 
fonfl^arding packets to Node B is resumed by buffer 30 and transmissions of 
packets to the affected clients is resumed by buffer 37. 

Figure 4 is a state diagram for a finite state machine (FSM) associated with 
each protected service path. This FSM runs on a processor (i.e. is implemented 
by software) and the outputs/actions performed by the FSM are those described 
above (i.e. steps (a) - (e)) including telling a bandwidth allocation controller (i.e. 



controller 10, 10' at nodes A and B, respectively, of Figure 3) how to configure 
itself. The states shown in Figure 4 are described in the following: 

init: Refers to the initial start-up state, whereby the FSM waits to be told that 
it is okay to proceed. 
5 Query Remote: Synchronize data with the remote node(s). 

Ready State: Ready to handle any switch request. 
Wait Switch Initiated Ack State: Waiting for the switch Initiated 
acknowledgement message. 

Wait Switch Request Ack State: Waiting for the switch request 
10 acknowledgement message. 

Wait Switch Request State: Waiting for the switch request message. 

Accordingly, the present invention enables service providers to use all 
available bandwidth while still providing protection, for those services that require 
it, under network failure conditions. Furthermore, through appropriate selection of 

15 bandwidth allocation, the degree to which services are assigned bandwidth under 
failure conditions may be tailored to meet the needs of a particular client. Thus, 
service providers can use the apparatus and method of the invention to obtain 
revenues based on the level of protection that is provided (e.g. a service path that 
requires the same bandwidth during a network failure may be designated a high 

20 level of protection for revenue purposes). Further, since the invention is suitable 
for both SONET/SDH and optical technologies, it allows for an intermingling of 
legacy protection mechanisms with the configurable bandwidth protection 
mechanism of the invention. This advantageously enables an optimization of 
protection for different service types. 

25 The individual electronic and processing functions utilised in the foregoing 

described preferred embodiment are, individually, well understood by those skilled 
in the art. It is to be understood by the reader that a variety of other 
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implementations may be devised by skilled persons for substitution. Persons 
skilled in the field of communication design will be readily able to apply the present 
invention to an appropriate implementation method for a given application. 

Consequently, it is to be understood that the particular embodiment shown 
and described herein by way of illustration is not intended to limit the scope of the 
invention claimed by the inventors which is defined by the appended claims. 
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